How severe is CVE-2000-1030?

CVE-2000-1030 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2000-1030 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2000-1030?

CVE-2000-1030 affects Csandt Corporatetime For The Web. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2000-1030?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2000-1030 published?

CVE-2000-1030 was published on 2000-12-11 and last updated on 2026-06-16.

CVE-2000-1030

CVE-2000-1030 is a medium-severity vulnerability in Csandt Corporatetime For The Web with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 2% (72nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Csandt Corporatetime For The Web
Published: 2000-12-11
Last modified: 2026-06-16

Description

CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.

Frequently asked questions

What is CVE-2000-1030?: CS&T CorporateTime for the Web returns different error messages for invalid usernames and invalid passwords, which allows remote attackers to determine valid usernames on the server.
How severe is CVE-2000-1030?: CVE-2000-1030 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2000-1030 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (72nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2000-1030?: CVE-2000-1030 affects Csandt Corporatetime For The Web. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2000-1030?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2000-1030 published?: CVE-2000-1030 was published on 2000-12-11 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:csandt:corporatetime_for_the_web:*:*:*:*:*:*:*:*